Re: D'un autre côté...

Etapes préliminaire:
qemu-img create test.img 1G
sudo losetup /dev/loop1 test.img
sudo mkfs.ext3 /dev/loop1
mkdir noexec
sudo mount /dev/loop1 noexec/ -o noexec,nodev,nosuid
sudo cp ./bin/hi ./noexec/

Infos:
./bin/hi: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.2.0, dynamically linked (uses shared libs), not stripped

/dev/loop1 on /home/nico/noexec type ext3 (rw,noexec,nosuid,nodev)

Linux xavia.thenico.fr.eu.org 2.6.12-10-686 #1 Mon Feb 13 12:18:37 UTC 2006 i686 GNU/Linux

Test témoin:
nico@xavia:~$ ./bin/hi
. half-life 3.1.0.x remote buffer-overflow for linux x86
. (c)2000, Tamandua Sekure Laboratories
. Authors: Thiago Zaninotti & Gustavo Scotti

. usage: hl-rcon <server ip[:port]>
nico@xavia:~$ /lib/ld-linux.so.2 ~/bin/hi
. half-life 3.1.0.x remote buffer-overflow for linux x86
. (c)2000, Tamandua Sekure Laboratories
. Authors: Thiago Zaninotti & Gustavo Scotti

. usage: hl-rcon <server ip[:port]>

Test dans la partition noexec:
nico@xavia:~/noexec$ ./hi
bash: ./hi: Permission non accordée
nico@xavia:~/noexec$ sudo ./hi
sudo: unable to execute ./hi: Permission denied
nico@xavia:~/noexec$ /lib/ld-linux.so.2 ./hi
./hi: error while loading shared libraries: ./hi: failed to map segment from shared object: Operation not permitted
nico@xavia:~/noexec$ sudo /lib/ld-linux.so.2 ./hi
./hi: error while loading shared libraries: ./hi: failed to map segment from shared object: Operation not permitted

Fin du test

Test effectué sur une Ubuntu hoary non fortifié au niveau kernel.